Description

Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list.

Remediation

References

CVE-2013-7233

Related Vulnerabilities

ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27008)

Oracle Database Server CVE-2013-1554 Vulnerability (CVE-2013-1554)

Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2020-24977)

Jboss EAP Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2018-1067)

Moodle Improper Input Validation Vulnerability (CVE-2017-2576)

Severity

Medium

Classification

CVE-2013-7233 CWE-352

Tags

Missing Update Known Vulnerabilities